Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-141846

[RHEL10] file /usr/share/selinux/devel/include/distributed is not owned by any package

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • fapolicyd-1.4.3-1.el10
    • No
    • Low
    • 1
    • rhel-security-selinux
    • 22
    • 1
    • QE ack
    • False
    • False
    • Hide

      None

      Show
      None
    • No
    • SELINUX 260128: 17
    • Hide

      Files/directories brought by the fapolicyd-selinux package should be owned by it too.

      Show
      Files/directories brought by the fapolicyd-selinux package should be owned by it too.
    • Pass
    • Automated
    • Release Note Not Required
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      https://fedoraproject.org/wiki/SELinux/IndependentPolicy#Using_custom_interfaces

      If an SELinux module provides interface file, -selinux sub-packages should ship it and own it as %{_datadir}/selinux/devel/include/distributed/%

      {modulename}

      .if

      But there's no package which owns %{_datadir}/selinux/devel/include/distributed/ - https://docs.fedoraproject.org/en-US/packaging-guidelines/UnownedDirectories/

      [root@vm-10-0-187-153 ~]# rpm -qf /usr/share/selinux/devel/include/distributed/
      file /usr/share/selinux/devel/include/distributed is not owned by any package
      [root@vm-10-0-187-153 ~]# rpm -qf /usr/share/selinux/devel/include/distributed/*
      fapolicyd-selinux-1.4.2-1.el10.noarch
      insights-core-selinux-3.6.11.1-1.el10.noarch
      passt-selinux-0^20251210.gd04c480-2.el10.noarch
      

      Either selinux-policy needs to own the whole tree after /usr/share/selinux/devel ; or guidelines and -selinux packages need to be fixed to own /usr/share/selinux/devel with all subdirs in the interface path

              rhn-engineering-plautrba Petr Lautrbach
              rhn-engineering-plautrba Petr Lautrbach
              Petr Lautrbach Petr Lautrbach
              Milos Malik Milos Malik
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

                Created:
                Updated: